Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LxKhAGImoKrAgU45US_hsHAvukI.roa
File: LxKhAGImoKrAgU45US_hsHAvukI.roa (raw, json)
Hash identifier: UWCUywB2izclyX5YVLD54inTG6wWSNhG4eI/MMfvong=
Subject key identifier: 2F:12:A1:00:62:26:A0:AA:C0:81:4E:39:51:2F:E1:B0:70:2F:BA:42
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0187C739D7583F47BC08C4071900CDB089BB
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LxKhAGImoKrAgU45US_hsHAvukI.roa
Signing time: Fri 28 Apr 2023 09:37:49 +0000
ROA not before: Fri 28 Apr 2023 09:37:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208453
IP address blocks: 2a12:bec0:2d0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:39:d7:58:3f:47:bc:08:c4:07:19:00:cd:b0:89:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 28 09:37:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f12a1006226a0aac0814e39512fe1b0702fba42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dd:b3:b5:dd:10:40:f6:e9:e9:ae:bd:21:82:
7e:a3:28:c8:a4:26:7f:69:5b:51:05:a7:10:9f:56:
42:5c:33:8f:52:72:80:d8:f7:9a:0e:9e:30:aa:14:
90:90:eb:ed:85:42:d3:c0:27:4c:23:b6:55:94:fe:
bc:ac:67:e0:7a:59:0e:4c:38:e2:c0:8b:7c:f0:d3:
6f:5c:4c:5d:cc:3f:9e:c3:fd:44:55:36:db:cf:50:
b5:0b:fd:99:04:3b:e8:57:81:ff:96:d2:22:f5:d0:
c6:33:1e:21:e0:ab:7f:3c:4a:12:8f:58:7a:d6:b8:
66:ac:87:98:bc:f7:9a:6f:4f:39:20:db:a9:74:23:
5f:b4:ac:fd:f6:64:40:70:a6:3b:fe:5d:e6:a1:47:
81:b5:98:a4:6b:76:af:04:54:1b:63:b7:7a:25:27:
30:63:26:bf:06:f1:5a:b2:68:b2:8e:37:1c:3f:6d:
91:45:f6:ff:16:29:f7:7a:7e:0d:d2:86:24:ac:23:
26:62:13:cb:47:1c:0a:af:d2:03:70:bc:3d:44:43:
9c:26:2d:57:55:01:95:2b:4c:5d:0a:0d:a3:8c:a1:
6e:b7:a4:ac:96:b2:b0:5d:76:fa:5a:b2:b6:61:68:
2b:1a:c7:19:4b:bc:e2:13:6e:23:00:dc:33:84:f0:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:12:A1:00:62:26:A0:AA:C0:81:4E:39:51:2F:E1:B0:70:2F:BA:42
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/LxKhAGImoKrAgU45US_hsHAvukI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
90:04:59:ff:d0:9d:03:b1:ed:11:81:4e:0c:3d:8b:d2:2a:9f:
7e:bc:0f:11:65:a0:51:54:b8:09:7c:eb:a7:4b:61:76:96:f9:
1f:e9:ea:f9:e9:be:1f:c4:c2:15:6d:9f:af:61:20:97:fd:c2:
c9:bb:1e:ee:76:26:10:94:c5:b0:6a:d2:f0:c5:17:c3:4e:e8:
ac:a7:83:0b:34:7c:8b:5f:b8:f6:fa:b0:ef:b0:9b:79:87:76:
7d:09:14:9c:c5:e2:e3:43:51:ab:40:46:1d:73:9b:26:7f:ba:
bb:b7:f7:9e:56:43:54:5b:1b:b1:ed:ae:54:fc:63:b4:84:ac:
00:f6:be:c0:55:51:3e:1e:58:6b:24:13:d6:56:4f:9f:bd:fa:
50:3c:58:f6:87:ca:de:6e:fe:98:93:f5:5f:d1:e2:b9:85:4e:
15:7e:88:21:45:fa:a2:88:b2:2f:0f:b0:3b:41:9c:21:b8:3a:
4d:c6:9b:0e:63:1d:2b:77:a8:93:12:63:47:c0:7b:54:e9:60:
74:45:19:bc:07:97:97:1c:66:32:f2:86:04:27:52:b9:b7:18:
52:0b:f9:3c:17:c4:ee:80:64:37:3e:7c:25:f4:af:b5:f5:87:
21:9e:3c:f5:cf:14:d3:f6:6a:15:e8:df:0d:49:29:17:61:06:
be:b1:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org